Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa
File:                     825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa (raw, json)
Hash identifier:          FmkXvtwZnkAQKhPnYhI2DtI9qyWiDkx38PnYJ3F7tqQ=
Subject key identifier:   BD:EE:F8:29:FF:F2:E9:B4:A6:65:57:8E:E9:9C:39:84:81:A3:C1:C8
Certificate issuer:       /CN=02e2201b-75a6-4194-9898-6fe2f60eaf78
Certificate serial:       010D0C9F4328584EBC7704FCD058F721AEE68F8E
Authority key identifier: 33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     55140
IP address blocks:        131.149.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:04:fc:d0:58:f7:21:ae:e6:8f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e2201b-75a6-4194-9898-6fe2f60eaf78
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=0502b74d-9581-49bb-b664-70fe51c897bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:de:25:37:ca:88:d9:c4:c9:72:66:00:d6:
                    63:5f:4f:30:38:65:55:d3:31:0b:e8:b3:2e:6d:92:
                    09:5d:ef:c1:4e:eb:d8:b8:77:17:3a:6f:ca:83:3c:
                    d7:89:78:2f:32:80:b6:d2:8c:aa:63:88:04:c0:f5:
                    1d:ef:9b:ff:e9:f5:3a:c7:4c:2e:58:76:18:d6:f9:
                    9a:e6:6b:e1:40:66:01:7a:a2:a2:1a:67:8c:ac:53:
                    86:79:29:c3:3f:a5:38:c0:51:e7:bf:da:6c:dd:bc:
                    66:8c:1e:26:f7:87:c3:f2:d5:12:02:7e:20:c0:db:
                    e1:72:4b:39:93:cb:f3:e3:c6:b4:7c:c6:bc:1c:e5:
                    9f:8f:dd:01:2c:3b:9c:c1:e4:56:6c:1f:81:8f:4f:
                    f5:aa:d0:02:22:ef:f7:41:6d:4b:c8:77:cb:47:80:
                    9e:91:b5:cd:b8:63:67:b7:b6:a9:88:95:99:83:ee:
                    a2:63:9f:53:6a:d7:b7:f9:51:e2:04:38:18:dc:45:
                    0f:ea:81:a4:98:aa:93:13:bd:17:7f:c6:59:a3:69:
                    34:65:46:fa:93:c0:26:0c:e9:ed:c7:04:0c:96:0d:
                    94:07:2d:28:41:dd:bc:b5:a8:c5:86:85:cd:08:12:
                    45:52:12:87:8a:ca:00:ac:0f:4f:5f:fc:f1:1a:ff:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:F8:29:FF:F2:E9:B4:A6:65:57:8E:E9:9C:39:84:81:A3:C1:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/825c2fa1-c91b-3c43-a4d0-c8d16fbc75c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78/02e2201b-75a6-4194-9898-6fe2f60eaf78.crl

            X509v3 Authority Key Identifier:
                keyid:33:69:A4:29:2A:74:9E:25:4F:26:0B:F4:5F:44:12:6C:66:73:20:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02e2201b-75a6-4194-9898-6fe2f60eaf78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.149.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:b0:9e:e5:95:05:7e:37:13:a2:cf:c7:1b:69:66:cd:19:
         0b:d4:28:eb:04:9a:db:aa:9d:7d:36:8c:96:24:21:41:f9:5b:
         90:e3:24:a3:fc:4a:2a:70:e2:9f:f3:6d:6e:1e:1e:b6:e6:a3:
         7b:f3:9e:db:f4:1e:09:b0:aa:a7:c7:51:ba:38:21:a0:b2:92:
         2d:91:e7:df:dd:84:4b:5d:d0:c5:3a:3b:ce:dc:35:06:53:8c:
         da:62:7d:2d:74:66:0b:5d:94:c7:bb:f3:52:d8:ca:5c:e2:c0:
         ae:aa:52:ae:65:b6:14:49:a2:0b:55:be:c4:98:42:ba:ea:fd:
         29:2a:69:b4:ef:89:dd:7c:40:71:8a:8a:a9:17:64:41:03:08:
         66:ed:58:83:96:6f:93:59:b8:05:5a:8a:a2:05:db:9d:d1:69:
         c0:4b:5e:9d:65:4c:3e:ad:c8:25:56:0a:ad:21:b3:2b:33:07:
         5f:a1:ab:08:71:41:2b:87:d2:76:a6:70:ec:e5:3f:cb:73:29:
         03:4e:ef:94:80:82:b5:bb:dc:b2:4f:35:3c:ac:63:1e:e3:1b:
         5e:e6:a3:7a:5f:11:73:4e:1d:c8:95:f9:80:d4:9a:06:4a:9f:
         c2:ba:f6:07:17:1c:80:4c:bd:e4:f7:a2:e2:3f:f2:c4:33:46:
         6c:f3:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:45 2026 by rpki-client